investswithelon[.]com

The domain investswithelon.com was registered on September 26, 2025 through NameSilo, LLC and is currently resolved to the IP address 206.72.206.88. The authoritative nameservers are vda2900a.trouble-free.net and vda2900b.trouble-free.net, both of which are associated with the same hosting provider. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that it is recognized as malicious by at least one reputable anti‑phishing feed.

VirusTotal analysis shows that four of ninety‑one scanning engines flag the domain, confirming that multiple security vendors have identified it as suspicious. The threat classification supplied is generic phishing, and the status is listed as active, meaning the infrastructure is still operational as of the report date, July 27, 2026. No additional data such as SSL certificate details, HTTP response codes, Safe Browsing status, OTX references, or page title information is available at this time.

Consequently, defenders should treat any traffic to or from investswithelon.com as hostile. Recommended mitigation steps include adding the domain to local deny lists, ensuring network perimeter controls block outbound connections to the resolved IP 206.72.206.88, and updating intrusion detection signatures to capture the known nameserver patterns. Continuous monitoring of the domain’s reputation across multiple threat intelligence sources is advised, as further indicators may emerge that clarify the phishing campaign’s target vector or payload delivery methods.